# Kubernetes Credentials Provider Issues **URL:** \ **Category:** Using Jenkins\ **Created:** [November 22, 2022, 1:27pm UTC](https://community.jenkins.io/t/kubernetes-credentials-provider-issues/4671 "2022-11-22T13:27:10Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![dannykitchen1](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/dannykitchen1/32/2791_2.png) [@dannykitchen1](https://community.jenkins.io/u/dannykitchen1)\ **Post date:** [November 22, 2022, 1:27pm UTC](https://community.jenkins.io/t/kubernetes-credentials-provider-issues/4671/1 "2022-11-22T13:27:11Z")
Hi All, having some issues with the above provider. Background, jenkins helm, running on EKS as controller. Issue i have is the plugin will not connect to secrets. - all i get is the below Nov 22, 2022 1:07:38 PM INFO com.cloudbees.jenkins.plugins.kubernetes\_credentials\_provider.KubernetesCredentialProvider startWatchingForSecrets retrieving secrets with selector: [jenkins.io/credentials-type](http://jenkins.io/credentials-type), LabelSelector(matchExpressions=, matchLabels=null, additionalProperties={}) Nov 22, 2022 1:07:38 PM SEVERE com.cloudbees.jenkins.plugins.kubernetes\_credentials\_provider.KubernetesCredentialProvider startWatchingForSecrets Failed to initialise k8s secret provider, secrets from Kubernetes will not be available javax.net.ssl.SSLPeerUnverifiedException: Hostname fdbb:a235:ec6b::1 not verified: certificate: sha256/6x03uRirRrP9xQTWkhweOGs/Ue7r2dDH4S3GXLImJPU= DN: CN=kube-apiserver subjectAltNames: [fdbb:a235:ec6b:0:0:0:0:1, 2a05:d018:6f8:1f42:0:0:0:6473, 172.16.120.175, [f6cfae71e9ade87e4620d5eefc37aa44.gr7.eu-west-1.eks.amazonaws.com](http://f6cfae71e9ade87e4620d5eefc37aa44.gr7.eu-west-1.eks.amazonaws.com), ip-172-16-120-175.eu-west-1.compute.internal, kubernetes, kubernetes.default, kubernetes.default.svc, kubernetes.default.svc.cluster.local] at okhttp3.internal.connection.RealConnection.connectTls(RealConnection.java:334) at okhttp3.internal.connection.RealConnection.establishProtocol(RealConnection.java:284) at okhttp3.internal.connection.RealConnection.connect(RealConnection.java:169) at okhttp3.internal.connection.StreamAllocation.findConnection(StreamAllocation.java:258) at okhttp3.internal.connection.StreamAllocation.findHealthyConnection(StreamAllocation.java:135) at okhttp3.internal.connection.StreamAllocation.newStream(StreamAllocation.java:114) at okhttp3.internal.connection.ConnectInterceptor.intercept(ConnectInterceptor.java:42) at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:147) at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:121) at okhttp3.internal.cache.CacheInterceptor.intercept(CacheInterceptor.java:93) at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:147) at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:121) at okhttp3.internal.http.BridgeInterceptor.intercept(BridgeInterceptor.java:93) at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:147) at okhttp3.internal.http.RetryAndFollowUpInterceptor.intercept(RetryAndFollowUpInterceptor.java:127) at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:147) at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:121) at io.fabric8.kubernetes.client.okhttp.OkHttpClientBuilderImpl$InteceptorAdapter.intercept(OkHttpClientBuilderImpl.java:62) at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:147) at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:121) at io.fabric8.kubernetes.client.okhttp.OkHttpClientBuilderImpl$InteceptorAdapter.intercept(OkHttpClientBuilderImpl.java:62) at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:147) at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:121) at io.fabric8.kubernetes.client.okhttp.OkHttpClientBuilderImpl$InteceptorAdapter.intercept(OkHttpClientBuilderImpl.java:62) at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:147) at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:121) at io.fabric8.kubernetes.client.okhttp.OkHttpClientBuilderImpl$InteceptorAdapter.intercept(OkHttpClientBuilderImpl.java:62) at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:147) at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:121) at okhttp3.RealCall.getResponseWithInterceptorChain(RealCall.java:257) at okhttp3.RealCall.execute(RealCall.java:93) at io.fabric8.kubernetes.client.okhttp.OkHttpClientImpl.send(OkHttpClientImpl.java:138) at io.fabric8.kubernetes.client.dsl.base.OperationSupport.retryWithExponentialBackoff(OperationSupport.java:574) at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleResponse(OperationSupport.java:553) at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleResponse(OperationSupport.java:518) at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleResponse(OperationSupport.java:502) at io.fabric8.kubernetes.client.dsl.base.BaseOperation.listRequestHelper(BaseOperation.java:133) Caused: io.fabric8.kubernetes.client.KubernetesClientException: Operation: [list] for kind: [Secret] with name: [null] in namespace: [jenkins] failed. at io.fabric8.kubernetes.client.KubernetesClientException.launderThrowable(KubernetesClientException.java:130) at io.fabric8.kubernetes.client.dsl.base.BaseOperation.listRequestHelper(BaseOperation.java:140) at io.fabric8.kubernetes.client.dsl.base.BaseOperation.list(BaseOperation.java:415) at io.fabric8.kubernetes.client.dsl.base.BaseOperation.list(BaseOperation.java:404) at io.fabric8.kubernetes.client.dsl.base.BaseOperation.list(BaseOperation.java:83) at com.cloudbees.jenkins.plugins.kubernetes\_credentials\_provider.KubernetesCredentialProvider.startWatchingForSecrets(KubernetesCredentialProvider.java:116) at com.cloudbees.jenkins.plugins.kubernetes\_credentials\_provider.KubernetesCredentialProvider$1.doRun(KubernetesCredentialProvider.java:165) at hudson.triggers.SafeTimerTask.run(SafeTimerTask.java:94) at jenkins.security.ImpersonatingScheduledExecutorService$1.run(ImpersonatingScheduledExecutorService.java:69) at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264) at java.base/java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:304) at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) at java.base/java.lang.Thread.run(Thread.java:829) Now looks to me like a cert issue that preventing connection. No idea how to disable the cert check though, if i am looking in the right place Many thanks ---
**Author:** ![dannykitchen1](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/dannykitchen1/32/2791_2.png) [@dannykitchen1](https://community.jenkins.io/u/dannykitchen1)\ **Post date:** [November 22, 2022, 1:59pm UTC](https://community.jenkins.io/t/kubernetes-credentials-provider-issues/4671/2 "2022-11-22T13:59:33Z")
Managed to sort this by adding the containerEnv: - name: KUBERNETES\_DISABLE\_HOSTNAME\_VERIFICATION value: “true”